Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [adfs]

Microsoft Active Directory Federation Service is an identity federation technology that provides single sign on access to web services and web applications using WS-* and SAML.

Microsoft Active Directory Federation Service is an identity federation technology that is compliant with industry standards such as WS-* and SAML 2.0. ADFS allows an organizations to use claims based access to web applications/services and provide single sign on (SSO) access to web applications. As ADFS is based on industry standards, interoperability with 3rd party federation technology is possible.

The initial version (ADFS 1.0) was shipped from Windows Server 2003 R2 onwards and is available in-box as of Windows Server 2008 R2. The latest version (AD FS 2.0) however is an out-of-band release that can be downloaded from http://www.microsoft.com.

More details are available from http://www.microsoft.com/windowsserver2008/en/us/ad-fs-2-overview.aspx

Claims based identity and access is explained at http://msdn.microsoft.com/en-us/library/ff423674.aspx

IT pro specific content is available from http://social.technet.microsoft.com/wiki/contents/articles/2735.aspx

365 questions
0
votes
1 answer

Integrating CRM 2011 and SharePoint 2010 using ADFS 2.0

As the title quite accurately reflects above, I have the following environment that I'm looking to tie all together: CRM 2011 IFD (already using ADFS 2.0 successfully) SharePoint 2010 There is integration between the two products in the form of…
JohnThePro
  • 2,595
  • 14
  • 23
0
votes
1 answer

ADFS 2.0 Server Prompts For Credentials When Using FQDN

We have an ADFS test enviroment set up, but we are running into issues with login prompts. If we browse to ADFS from Domain A we get a token sucessfully from ADFS, however when we browse from Domain B we are getting prompted for credentials. Domain…
ncaudill
  • 1
  • 1
0
votes
1 answer

ISA 2006 , two listeners on the same port with different certificates and methods of authentifications

I couldn't find an clear answer to the question : -Does ISA 2006 support more than 1 listener on the same port (HTTPS /443 , with the same certificate / and different method of authentication - one to FBA with AD and one with no authentication). I…
Alex H
  • 1,814
  • 11
  • 18
0
votes
1 answer

ADFS 2.0 and CRM 2011 IFD - Error 403 when being redirected

I'm not sure what happened here, but let me give you the rundown. I have a CRM 2011 IFD that by all accounts was functioning. Out of nowhere, I find that when being redirected to ADFS 2.0 login page by CRM, instead of seeing the login page, I get…
JohnThePro
  • 2,595
  • 14
  • 23
0
votes
1 answer

Google Apps For Business, SSO, AD FS 2.0 and AD

We are a small company with 22 people in the office. We had a lot of problems with e-mail in the past so I decided to change over to Google Apps for Business. It is the perfect solution for us, except for one thing: I need to be able to control the…
Dominique dutra
  • 1
0
votes
1 answer

Migrating from ADFS 1.1 to ADFS 2.0

We're planning to migrate from ADFS 1.1 to ADFS 2.0 and I've been researching for a whitepaper on the subject with out much luck. Any one has a reference to such?
Rune FS
  • 139
  • 1
  • 8
0
votes
1 answer

Purpose of the adfssrv-service

The setup for ADFS 2.0 installs a new service adfssrv in addition to the ADFS website. What is the purpose of this service? The documentation does not contain any information about it.
ccellar
  • 213
  • 2
  • 14
0
votes
1 answer

ADFS 2.0 - Is it possible to configure OU restriction

In ADFS, Is it possible to restrict set of OU’s user ids should not allow to authenticate? E.g.: If we have 2 OU’s (let say OU1 & OU2) in the Active directory, if a user from OU1 tries to login from the ADFS login screen we should allow him to…
krishna
0
votes
1 answer

Erroneous error in AD FS 2.0 Federation Server Configuration Wizard

I am trying to set up AD FS 2.0 on a Windows Server 008 R2 Enterprise, but I am stuck on getting an error when trying to run the "AD FS 2.0 Federation Server Configuration Wizard": The error states that "Microsoft .NET Framework 3.5 is required for…
Jørn Schou-Rode
  • 720
  • 1
  • 6
  • 12
0
votes
0 answers

Can I skip pre-auth for some requests in AD FS Web Application Proxy?

I have two IIS applications with Windows Authentication. One SharePoint Server(SE) and a provider hosted app, which is a separate website that can access SharePoint via OAuth. The app can send AJAX requests to SharePoint just fine when there is no…
Gabriel Smoljar
  • 101
  • 1
  • 3
0
votes
0 answers

Do I need an ADFS and Proxy?

The client has an ADFS server and they use our APP hosted on IIS developed on Dot Net. How Do I set UP ADFS - do I need ADFS Proxy server as well, Can I use an existing AD server and install ADFS, we should also create an URL for access. something…
DisplayName
  • 262
  • 4
  • 14
0
votes
0 answers

ADFS2 secondary server not listening on port 443

Our monitoring sensor connection for https 443 to our secondary ADFS server is refused. We recently renewed theADFS SSL certificate, and since the secondary server is not listening on port 443. All changes appeared to have been replicated…
Zenith2k3
  • 1
0
votes
0 answers

ADFS Web Application proxy 2016 errors

I have a Domain Controller(Windows server 2016) and installed ADFS on another machine(Windows Server 2016) on the same domain. I can access the IDP signon page in the domain machines internally. Now, I am trying to provide a reverse proxy to the…
Shunmusiva
  • 1
  • 2
0
votes
0 answers

Can ADFS present one IDP to SAML SP, but authenticate against multiple AD servers on the back end?

Summary Can ADFS present one IDP to a SAML Service Provider (SP), but authenticate against multiple AD servers on the back end? Context Here's the usecase: Company Foo has bought company Bar They plan to fully integrate/combine their…
user50460
  • 315
  • 1
  • 2
  • 8
0
votes
1 answer

ADFS Client Certificate Authentication

I have ADFS on my environment and it's currently authenticating via active directory perfectly fine. I'm trying to enable certificate authentication so they can authenticate with their smart cards. Currently, the smart cards are imported into their…
Mlsracer
  • 1
  • 1
1 2 3
…
24 25